<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->


<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="Step 4: Configuring Access Permissions (Applicable to OceanStor V5/OceanStor Pacific/NetApp ONTAP)">
<meta name="product" content="">
<meta name="DC.Relation" scheme="URI" content="en-us_topic_0000002164805012.html">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="">
<meta name="DC.Publisher" content="20250306">
<meta name="prodname" content="csbs">
<meta name="documenttype" content="usermanual">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="EN-US_TOPIC_0000002164645244">
<meta name="DC.Language" content="en-us">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>Step 4: Configuring Access Permissions (Applicable to OceanStor V5/OceanStor Pacific/NetApp ONTAP)</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="EN-US_TOPIC_0000002164645244"></a><a name="EN-US_TOPIC_0000002164645244"></a>

<h1 class="topictitle1">Step 4: Configuring Access Permissions (Applicable to OceanStor V5/OceanStor Pacific/NetApp ONTAP)</h1>
<div><p>Before NAS share backup, you need to configure access permissions for the <span>OceanProtect</span> on the production storage device so that the <span>OceanProtect</span> can read data from the production storage in share mode.</p>
<p>In this section, OceanStor Dorado of versions earlier than 6.1.3 is used as the production storage to show how to configure NFS and CIFS share access permissions for the <span>OceanProtect</span>.</p>
<div class="section"><h4 class="sectiontitle">NFS Share</h4><p>If the NAS share to be protected is an NFS share, perform the following steps:</p>
<ol><li><span>Log in to DeviceManager of the production storage device.</span></li><li><span>Choose <strong>Services</strong> &gt; <strong>File Service</strong> &gt; <strong>Shares</strong>.</span></li><li><span>On the <strong>NFS Shares</strong> tab page, choose <strong>More</strong> &gt; <strong>Add Client</strong> on the right of the NFS share to be protected.</span></li><li><span>Set client parameters.</span><p><div class="p"><a href="#EN-US_TOPIC_0000002164645244__en-us_topic_0000001142022956_table12170124133619">Table 1</a> describes the parameters.
<div class="tablenoborder"><a name="EN-US_TOPIC_0000002164645244__en-us_topic_0000001142022956_table12170124133619"></a><a name="en-us_topic_0000001142022956_table12170124133619"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002164645244__en-us_topic_0000001142022956_table12170124133619" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters for adding a client</caption><colgroup><col style="width:32.269999999999996%"><col style="width:67.73%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="32.269999999999996%" id="mcps1.3.3.3.4.2.1.2.2.3.1.1"><p>Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="67.73%" id="mcps1.3.3.3.4.2.1.2.2.3.1.2"><p>Description</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.1 "><p>Type</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.2 "><p>Select <strong>Host</strong>.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.1 "><p>Clients</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.2 "><p>Client IP addresses accessing the share. Enter the backup IP address segment configured on the <span>OceanProtect</span>.</p>
<p>You can obtain the backup IP address segment from the corresponding backup network plane (choose <span><strong>System</strong></span> &gt; <strong>Container Service</strong> &gt; <strong>Network Planes</strong> on DeviceManager of the <span>OceanProtect</span>).</p>

</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.1 "><p>Permission</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.3.3.4.2.1.2.2.3.1.2 "><p>Select <strong>Read-write</strong>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</p></li><li><span>Select <strong>Advanced</strong> in the upper right corner to set advanced parameters.</span><p><p>Set <strong>root Permission Constraint</strong> to <strong>no_root_squash</strong> and retain default values for other parameters.</p>
</p></li><li><span>Click <strong>OK</strong>.</span></li></ol>
</div>
<div class="section"><h4 class="sectiontitle">CIFS Share</h4><p>If the NAS share to be protected is a CIFS share, perform the following steps:</p>
<ol><li><span>Log in to DeviceManager of the production storage device.</span></li><li><span>Choose <strong>Services</strong> &gt; <strong>File Service</strong> &gt; <strong>Authentication Users</strong>.</span><p><div class="note"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p>If there has been a local authentication user in the <strong>Administrators</strong> group, perform <a href="#EN-US_TOPIC_0000002164645244__li679311623114">5</a> to <a href="#EN-US_TOPIC_0000002164645244__li2119145372410">8</a>.</p>
</div></div>
</p></li><li><span>Click the <strong>Windows Users</strong> tab and click <strong>Create</strong> to create a local Windows authentication user.</span></li><li id="EN-US_TOPIC_0000002164645244__li55065812712"><a name="EN-US_TOPIC_0000002164645244__li55065812712"></a><a name="li55065812712"></a><span>Set parameters for the local authentication user.</span><p><p><a href="#EN-US_TOPIC_0000002164645244__table1580194317282">Table 2</a> describes the parameters.</p>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000002164645244__table1580194317282"></a><a name="table1580194317282"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002164645244__table1580194317282" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters for creating a local authentication user</caption><colgroup><col style="width:32.269999999999996%"><col style="width:67.73%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="32.269999999999996%" id="mcps1.3.4.3.4.2.2.2.3.1.1"><p>Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="67.73%" id="mcps1.3.4.3.4.2.2.2.3.1.2"><p>Description</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.4.2.2.2.3.1.1 "><p>Name</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.4.2.2.2.3.1.2 "><p>Set a new user name.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.4.2.2.2.3.1.1 "><p>Password</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.4.2.2.2.3.1.2 "><p>Set a password for the new user.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.4.2.2.2.3.1.1 "><p>Confirm Password</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.4.2.2.2.3.1.2 "><p>Enter the password again.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.4.2.2.2.3.1.1 "><p>Status</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.4.2.2.2.3.1.2 "><p>Select <strong>Enable</strong>.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.4.2.2.2.3.1.1 "><p>Available Groups</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.4.2.2.2.3.1.2 "><p>Select <strong>Administrators</strong>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</p></li><li id="EN-US_TOPIC_0000002164645244__li679311623114"><a name="EN-US_TOPIC_0000002164645244__li679311623114"></a><a name="li679311623114"></a><span>In the navigation tree on the left, click <strong>Shares</strong>. Then, click the <strong>CIFS Shares</strong> tab.</span></li><li><span>Choose <strong>More</strong> &gt; <strong>Add User or User Group</strong> on the right of the CIFS share to be protected.</span></li><li><span>Set user or user group parameters.</span><p><div class="p"><a href="#EN-US_TOPIC_0000002164645244__table7119165310243">Table 3</a> describes the parameters.
<div class="tablenoborder"><a name="EN-US_TOPIC_0000002164645244__table7119165310243"></a><a name="table7119165310243"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000002164645244__table7119165310243" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Parameters for adding a user or user group</caption><colgroup><col style="width:32.269999999999996%"><col style="width:67.73%"></colgroup><thead align="left"><tr><th align="left" class="cellrowborder" valign="top" width="32.269999999999996%" id="mcps1.3.4.3.7.2.1.2.2.3.1.1"><p>Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="67.73%" id="mcps1.3.4.3.7.2.1.2.2.3.1.2"><p>Description</p>
</th>
</tr>
</thead>
<tbody><tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.1 "><p>Type</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.2 "><p>Select <strong>Local Windows authentication user</strong>.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.1 "><p>Available Users or User Groups</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.2 "><p>Select the user created in <a href="#EN-US_TOPIC_0000002164645244__li55065812712">4</a>.</p>
</td>
</tr>
<tr><td class="cellrowborder" valign="top" width="32.269999999999996%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.1 "><p>Permission</p>
</td>
<td class="cellrowborder" valign="top" width="67.73%" headers="mcps1.3.4.3.7.2.1.2.2.3.1.2 "><p>Select <strong>Read-write</strong>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</p></li><li id="EN-US_TOPIC_0000002164645244__li2119145372410"><a name="EN-US_TOPIC_0000002164645244__li2119145372410"></a><a name="li2119145372410"></a><span>Click <strong>OK</strong>.</span></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="en-us_topic_0000002164805012.html">Backing Up a NAS Share</a></div>
</div>
</div>

<div class="hrcopyright"><hr size="2"></div><div class="hwcopyright">Copyright &copy; Huawei Technologies Co., Ltd.</div></body>
</html>